VULNERABILITY INTELLIGENCE
CVE-2010-3716
CVSS score6 MEDIUM
EPSS probability0.97%
CISA KEVNot currently listed
Published2010-10-25
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:S/C:P/I:P/A:P
Description
The be_user_creation task in TYPO3 4.2.x before 4.2.15 and 4.3.x before 4.3.7 allows remote authenticated users to gain privileges via a crafted POST request that creates a user account with arbitrary group memberships.
Weakness classification
- CWE-20: Improper Input Validation